CVE-2017-1192

HIGH 8.2CVE-2017-1192 · Published 10/08/2017 · updated 17/06/2026

In short

CVE-2017-1192 is a HIGH (CVSS 8.2) vulnerability affecting sterling b2b integrator (ibm).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sterling b2b integrator ibm	`= 5.2`	No fix yet

Description

IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663.

References

ibm.com/support/docview.wss · Vendor Advisory
securityfocus.com/bid/102864
exchange.xforce.ibmcloud.com/vulnerabilities/123663 · VDB Entry

More vulnerabilities in sterling b2b integrator

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sterling b2b integrator

ibm

= 5.2

No fix yet

More vulnerabilities in sterling b2b integrator

See all →